powermail-discuss Digest #2551 - Monday, January 29, 2007
foxtrot list
by "Marlyse Comte" <[EMAIL PROTECTED]>
Re: foxtrot list
by "Barbara Needham" <[EMAIL PROTECTED]>
Re: foxtrot list
by "Karim Kabbabe" <[EMAIL PROTECTED]>
Re: Negative unread messages in the inbox
by "PowerMail Engineering" <[EMAIL PROTECTED]>
Re: foxtrot list
by "C. A. Niemiec" <[EMAIL PROTECTED]>
Re: foxtrot list
by "Jim Pistrang" <[EMAIL PROTECTED]>
Re: foxtrot list
by "Ken Pope" <[EMAIL PROTECTED]>
greeting card malware?
by "Mark Gerber" <[EMAIL PROTECTED]>
Re: greeting card malware?
by "computer artwork by subhash" <[EMAIL PROTECTED]>
Re: greeting card malware?
by "Wayne Brissette" <[EMAIL PROTECTED]>
Re: greeting card malware?
by "Matthias Schmidt" <[EMAIL PROTECTED]>
Re: greeting card malware?
by "Justin Beek" <[EMAIL PROTECTED]>
Re: greeting card malware?
by <[EMAIL PROTECTED]>
Re: greeting card malware?
by "Michael Lewis" <[EMAIL PROTECTED]>
Re: greeting card malware?
by "Michael Lewis" <[EMAIL PROTECTED]>
Re: greeting card malware?
by "Mark Gerber" <[EMAIL PROTECTED]>
Re: greeting card malware?
by "Frank Mitchell" <[EMAIL PROTECTED]>
----------------------------------------------------------------------
Subject: foxtrot list
From: "Marlyse Comte" <[EMAIL PROTECTED]>
Date: Sun, 28 Jan 2007 22:05:46 -0600
I'm wondering about the foxtrot list if that is alive. I'm sure I was
subscribed but somehow it seems not and so I re-subscribed today but
never received a welcome email etc. and so I'm not sure if the list is
up or what... anyone else on that list?
---marlyse
----------------------------------------------------------------------
Subject: Re: foxtrot list
From: "Barbara Needham" <[EMAIL PROTECTED]>
Date: Sun, 28 Jan 2007 21:47:04 -0800
Marlyse Comte wrote:
> I'm wondering about the foxtrot list if that is alive. I'm sure I was
> subscribed but somehow it seems not and so I re-subscribed today but
> never received a welcome email etc. and so I'm not sure if the list is
> up or what... anyone else on that list?
Yes it is active, that is to say alive. I have 4 posts for all of
January 2007, 1 of them being from fox trot engineering 6 Jan 2007, 7
Jan 2007, and 3 on 26 Jan 2007.
I didn't get anything on the power mail list for about 5 months last year...
--
Barbara Needham
----------------------------------------------------------------------
Subject: Re: foxtrot list
From: "Karim Kabbabe" <[EMAIL PROTECTED]>
Date: Mon, 29 Jan 2007 12:38:38 +0800
Yes I am on the list :-)
On 29 Jan 2007, at 12:05 PM, Marlyse Comte wrote:
> I'm wondering about the foxtrot list if that is alive. I'm sure I was
> subscribed but somehow it seems not and so I re-subscribed today but
> never received a welcome email etc. and so I'm not sure if the list is
> up or what... anyone else on that list?
>
> ---marlyse
>
>
----------------------------------------------------------------------
Subject: Re: Negative unread messages in the inbox
From: "PowerMail Engineering" <[EMAIL PROTECTED]>
Date: Mon, 29 Jan 2007 09:51:32 +0100
Robert Snyder wrote:
>The only way that I can make the -3 unread and the bold In Tray go away
>is to compact my mailboxes. When that completes, there are no new unread
>emails in the inbox, and unread and bold are gone.
You can also fix this problem by performing a "verify the consistency of
database records". To do this, press the command and option keys while
PowerMail is launching, and check the appropriate checkbox.
If this problem happens again, and you have an idea of what could have
caused it, please let me know.
Jérôme - PowerMail Engineering
---------------------------------------------------------------------
"First, PowerMail downloads mail in about half the time of Entourage.
Second, it's rock solid. Hasn't crashed once (Entourage crashed
regularly). Third, searches are lightening fast, very impressive
facility. Fourth, it has a very nice filtering capability, at least
as strong as Entourage and probably stronger (my rules sets are fairly
straightforward). Fifth, it auto syncs with AddressBook without the
need for external scripts like in Entourage."
PowerMail user comment on www.versiontracker.com
Download a demo version from www.ctmdev.com
---------------------------------------------------------------------
----------------------------------------------------------------------
Subject: Re: foxtrot list
From: "C. A. Niemiec" <[EMAIL PROTECTED]>
Date: Mon, 29 Jan 2007 05:27:15 -0500
>I'm wondering about the foxtrot list if that is alive. ...
>anyone else on that list?
No one here but us FoxTrot list members. :)
But I am surprised at the lull in PM list activity.
Chris
--
----------------------------------------------------------------------
Subject: Re: foxtrot list
From: "Jim Pistrang" <[EMAIL PROTECTED]>
Date: Mon, 29 Jan 2007 06:43:46 -0500
Hi Marlyse,
>I'm wondering about the foxtrot list if that is alive.
Alive but very quiet.
Jim
--
Jim Pistrang
JP Computer Resources
Certified Member, Apple Consultants Network
413-256-4569
<http://www.jpcr.com>
----------------------------------------------------------------------
Subject: Re: foxtrot list
From: "Ken Pope" <[EMAIL PROTECTED]>
Date: Mon, 29 Jan 2007 07:52:15 -0500
>I'm wondering about the foxtrot list if that is alive.
Yes, though very low-traffic (which has its benefits). Every once-in-a-
while, someone posts a question and almost immediately another user or
someone from the company posts the answer. Very helpful.
Ken
----------------------------------------------------------------------
Subject: greeting card malware?
From: "Mark Gerber" <[EMAIL PROTECTED]>
Date: Mon, 29 Jan 2007 09:04:00 -0500
This isn't specific to PowerMail, but I'm hoping someone can point me in
the right direction to solve this problem.
For the past several weeks I've been getting a lot of e-mail dumped into
my Spam folder with the subject indicating "delivery failed." They are
from addresses I don't know and are responding to an e-mail from my
domain (using a random name, for instance: hpbxx @ gerberstudio.com).
There is often an attachement named something like "Greeting Card.exe"
involved.
As far as I've been able to find out I seem to have been infected with
the "Happy New Year" worm, but I haven't found a solution for OS X. Does
anyone know where I can get more information?
Thanks.
Mark
----
Mark Gerber
GERBER STUDIO/Tradigital Illustration
<http://www.gerberstudio.com>
<http://www.theispot.com/artist/mgerber>
----------------------------------------------------------------------
Subject: Re: greeting card malware?
From: "computer artwork by subhash" <[EMAIL PROTECTED]>
Date: Mon, 29 Jan 2007 15:18:44 +0100
[Mark Gerber <[EMAIL PROTECTED]> schrieb am 29.1.2007 um 9:04 Uhr:]
>"Greeting Card.exe"
>"Happy New Year"
>OS X
???
How can you be infected with a worm which is an .exe-file on Mac OS?
That is impossible.
Sounds to me as if someone else (using Windows) is infected and the worm
uses your domainname to send mails to (sometimes non existing) mailboxes.
--
http://www.subhash.at
----------------------------------------------------------------------
Subject: Re: greeting card malware?
From: "Wayne Brissette" <[EMAIL PROTECTED]>
Date: Mon, 29 Jan 2007 08:26:39 -0600 (GMT-06:00)
>>"Greeting Card.exe"
>>"Happy New Year"
>>OS X
>
>???
>
>How can you be infected with a worm which is an .exe-file on Mac OS?
>That is impossible.
>
>Sounds to me as if someone else (using Windows) is infected and the worm
>uses your domainname to send mails to (sometimes non existing) mailboxes.
You beat me to it. ;-)
Spam in general seems to be way up recently. One day last week I had 399 spam
messages, then two days later it was 350. It's gotten to a point that real mail
is less than 2% of all my emails. :-(
Wayne
----------------------------------------------------------------------
Subject: Re: greeting card malware?
From: "Matthias Schmidt" <[EMAIL PROTECTED]>
Date: Mon, 29 Jan 2007 15:24:49 +0100
Am/On Mon, 29 Jan 2007 09:04:00 -0500 schrieb/wrote Mark Gerber:
>This isn't specific to PowerMail, but I'm hoping someone can point me in
>the right direction to solve this problem.
I think that's a misconfigured mailserver which is rejecting (infected
virus) mail instead of bouncing it.
>
>For the past several weeks I've been getting a lot of e-mail dumped into
>my Spam folder with the subject indicating "delivery failed." They are
>from addresses I don't know and are responding to an e-mail from my
>domain (using a random name, for instance: hpbxx @ gerberstudio.com).
>There is often an attachement named something like "Greeting Card.exe"
>involved.
>
>As far as I've been able to find out I seem to have been infected with
>the "Happy New Year" worm, but I haven't found a solution for OS X. Does
>anyone know where I can get more information?
the worm affects only Windoze ....
But if you're afraid of viruses on the Mac, install ClamXav, works great.
Another nice thing is snort, the installation for OS X is called HenWen.
All the best
Matthias
-----------------------------------------------
Admilon Consulting GmbH
http://www.admilon.com
Tel. +81-736-56-3905
-----------------------------------------------
----------------------------------------------------------------------
Subject: Re: greeting card malware?
From: "Justin Beek" <[EMAIL PROTECTED]>
Date: Mon, 29 Jan 2007 08:45:59 -0600
Look through the headers. Look for a Lookup warning. It may show that
it is from someone else:
X-Lookup-Warning: MAIL lookup on [EMAIL PROTECTED] does not match
201.69.126.198
If your server doesn't perform Lookups, look for the originating IP
and see if it is from your domain:
Return-path: <[EMAIL PROTECTED]>
Received: from smtp.-snip-.com (201-69-126-198.dial-up.telesp.net.br
[201.69.126.198])
I would guess that it is NOT coming from your network.
Justin
On Jan 29, 2007, at 8:04 AM, Mark Gerber wrote:
> This isn't specific to PowerMail, but I'm hoping someone can point
> me in
> the right direction to solve this problem.
>
> For the past several weeks I've been getting a lot of e-mail dumped
> into
> my Spam folder with the subject indicating "delivery failed." They are
> from addresses I don't know and are responding to an e-mail from my
> domain (using a random name, for instance: hpbxx @ gerberstudio.com).
> There is often an attachement named something like "Greeting Card.exe"
> involved.
>
> As far as I've been able to find out I seem to have been infected with
> the "Happy New Year" worm, but I haven't found a solution for OS X.
> Does
> anyone know where I can get more information?
>
> Thanks.
> Mark
> ----
> Mark Gerber
> GERBER STUDIO/Tradigital Illustration
> <http://www.gerberstudio.com>
> <http://www.theispot.com/artist/mgerber>
>
>
>
>
----------------------------------------------------------------------
Subject: Re: greeting card malware?
From: <[EMAIL PROTECTED]>
Date: Mon, 29 Jan 2007 10:10:54 -0500 (EST)
Your email address has been "spoofed." I have 2 domains that have NO
outgoing email server at all and I get returns all the time. I just
ignore them. There is absolutely nothing you can do about this. Most
email servers can catch a fraudulent email address and bounce it.
> Am/On Mon, 29 Jan 2007 09:04:00 -0500 schrieb/wrote Mark Gerber:
>
>>This isn't specific to PowerMail, but I'm hoping someone can point me in
>>the right direction to solve this problem.
>
>
> I think that's a misconfigured mailserver which is rejecting (infected
> virus) mail instead of bouncing it.
>
>>
>>For the past several weeks I've been getting a lot of e-mail dumped into
>>my Spam folder with the subject indicating "delivery failed." They are
>>from addresses I don't know and are responding to an e-mail from my
>>domain (using a random name, for instance: hpbxx @ gerberstudio.com).
>>There is often an attachement named something like "Greeting Card.exe"
>>involved.
>>
>>As far as I've been able to find out I seem to have been infected with
>>the "Happy New Year" worm, but I haven't found a solution for OS X. Does
>>anyone know where I can get more information?
>
> the worm affects only Windoze ....
>
> But if you're afraid of viruses on the Mac, install ClamXav, works great.
> Another nice thing is snort, the installation for OS X is called HenWen.
>
> All the best
>
> Matthias
>
> -----------------------------------------------
> Admilon Consulting GmbH
> http://www.admilon.com
> Tel. +81-736-56-3905
> -----------------------------------------------
>
>
>
----------------------------------------------------------------------
Subject: Re: greeting card malware?
From: "Michael Lewis" <[EMAIL PROTECTED]>
Date: Mon, 29 Jan 2007 10:38:19 -0500
Wayne Brissette sez:
>Spam in general seems to be way up recently. One day last week I had 399
>spam messages, then two days later it was 350. It's gotten to a point
>that real mail is less than 2% of all my emails. :-(
Sadly this is true for me as well. SpamSieve isn't even catching a lot
of it, particularly the ones that are filled with random sentences from
works of literature. It also was missing a bunch of things that said
"loan request" in it despite me marking them spam, until I went in and
blacklisted anything with loan request in it. Maybe I need to
recalibrate SpamSieve, but I generally delete all my spam and don't
remember I should be saving it until I think about recalibrating. :) DOH!
--
Michael Lewis
Off Balance Productions
[EMAIL PROTECTED]
www.offbalance.com
----------------------------------------------------------------------
Subject: Re: greeting card malware?
From: "Michael Lewis" <[EMAIL PROTECTED]>
Date: Mon, 29 Jan 2007 10:46:09 -0500
[EMAIL PROTECTED] sez:
>Your email address has been "spoofed." I have 2 domains that have NO
>outgoing email server at all and I get returns all the time. I just
>ignore them. There is absolutely nothing you can do about this. Most
>email servers can catch a fraudulent email address and bounce it.
There is one thing that can be done, at least if the emails are
advertising something.
Once when my domain was spoofed and I had to deal with around 20,000
bouncebacks over the course of a week, I was able to use WhoIs to track
down the ISP of the pharmaceutical site being advertised. Don't go after
the spammer -- you can probably never find it; go after the advertiser.
They have to have some place for a person to contact in order to make
their money -- so hit them there.
Once I had the internet provider of the advertiser, I sent a nicely
worded cease-and-desist letter claiming if they did not shut down the
site, I would have to contact my lawyers to complete papers filing for
fraudulent use of my corporate identity. Yeah, I don't know if such a
thing exists, but pad it out with some legal mumbo jumbo and it sounded
good. :)
They shut down the advertiser's site. I still got bouncebacks for a
while, but I was much more satisfied. :)
--
Michael Lewis
Off Balance Productions
[EMAIL PROTECTED]
www.offbalance.com
----------------------------------------------------------------------
Subject: Re: greeting card malware?
From: "Mark Gerber" <[EMAIL PROTECTED]>
Date: Mon, 29 Jan 2007 12:28:05 -0500
Thanks for all the responses.
For the several weeks this has been happening I've been assuming this
worm was a Windows problem and that my address was being spoofed. But
then I came across a message that had been returned from a client's
domain. Granted this is a huge company with any number of people and
several websites--but I was alarmed at the coincidence (at least, I hope
it was a coincidence).
So I wondered if some malware out there had finally found it's way to OS
X in spite of no mention of both it and "Macintosh" on the security sites
I check when something like this comes up. I appreciate those familiar
with these problems answering so quickly.
It sounds like I have to endure these things until someone(s?), somewhere
takes care of it on their own computer(s) and there's nothing I can do
about it unless I want to track down the advertised ISPs and contact them
to put a stop to it. And there is no way I can determine who's computer
it was that snatched my domain for it's own use.
In the meantime, I'll check out ClamXav and HenWen to see what they offer
in terms of peace of mind.
Mark
----
Mark Gerber
GERBER STUDIO/Tradigital Illustration
<http://www.gerberstudio.com>
<http://www.theispot.com/artist/mgerber>
----------------------------------------------------------------------
Subject: Re: greeting card malware?
From: "Frank Mitchell" <[EMAIL PROTECTED]>
Date: Mon, 29 Jan 2007 11:36:36 -0700
Hello Michael
>>Spam in general seems to be way up recently. One day last week I had 399
>>spam messages, then two days later it was 350. It's gotten to a point
>>that real mail is less than 2% of all my emails. :-(
>
>Sadly this is true for me as well. SpamSieve isn't even catching a lot
>of it, particularly the ones that are filled with random sentences from
>works of literature.
I suspect these are intended to overload programs which work like
SpamSieve with "millions" of random 'good' words. If there are enough of
them they could eventually render SS ineffective. Your experience seems
to confirm this.
For this reason, I simply delete such random word messages rather than do
a "Mark as Spam".
That's my theory anyway 8^)
Frank
-- Frank Mitchell, Scottsdale, Arizona
----------------------------------------------------------------------
End of powermail-discuss Digest
